2411 matches found
EUVD-2026-73034
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network...
CVE-2026-69628
CVE-2026-69628 is a heap-based buffer overflow in Windows iSCSI that allows an authorized attacker to achieve remote code execution over a network. The Microsoft-assigned CVSS 3.1 score is 8.8 (HIGH) , reflecting a network attack vector, low complexity, low privileges required, no user interactio...
Windows iSCSI Target Service Denial of Service Vulnerability
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...
Windows iSCSI Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network...
Windows iSCSI Remote Code Execution Vulnerability
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network...
Windows iSCSI Security Feature Bypass Vulnerability
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network...
Windows iSCSI Denial of Service Vulnerability
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network...
kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode
A flaw was found in the Linux kernel's iSCSI target functionality. This vulnerability allows a remote attacker to cause a buffer overflow by sending a specially crafted Challenge-Handshake Authentication Authentication Protocol CHAP response. The system fails to validate the length of the...
CVE-2026-69598: Incorrect Calculation of Buffer Size
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network...
PT-2026-87934
Name of the Vulnerable Software and Affected Versions Windows iSCSI affected versions not specified Description Weak authentication in the Windows iSCSI Target service allows an unauthorized remote attacker to bypass security restrictions over a network. Recommendations At the moment, there is no...
PT-2026-87312
Name of the Vulnerable Software and Affected Versions Windows iSCSI affected versions not specified Description An out-of-bounds read occurs in Windows iSCSI, which allows an unauthorized attacker to cause a denial-of-service condition over a network. An out-of-bounds read is a type of memory...
CVE-2026-68898: Out-of-bounds Read
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network...
PT-2026-87600
Name of the Vulnerable Software and Affected Versions Windows iSCSI affected versions not specified Description An incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Recommendations At the...
PT-2026-87752
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...
PT-2026-87309
Name of the Vulnerable Software and Affected Versions Internet Storage Name Service affected versions not specified Description A numeric truncation error occurs in the Internet Storage Name Service, which allows an authorized attacker to disclose information locally. Recommendations At the momen...
PT-2026-87629
Name of the Vulnerable Software and Affected Versions Windows iSCSI affected versions not specified Description A heap-based buffer overflow occurs in Windows iSCSI, which allows an authorized attacker to execute arbitrary code over a network and affect the system. A heap-based buffer overflow is...
kernel security, bug fix, and enhancement update
5.14.0-687.44.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
CVE-2026-69839: Uncaught Exception
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...